Microsoft Office Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails.</p> <p>The attacker would have to use another vulnerability to gain access to the victim's Drafts folder, either locally on the victim's system or remotely via MAPI.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Outlook enforces DRM copy/paste permissions.</p>

Where it's fixed